Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/q_5Wnmxvbvx3hMeX5RmXTRoVRH0.roa
File: q_5Wnmxvbvx3hMeX5RmXTRoVRH0.roa (raw, json)
Hash identifier: it/Tgnpldg4NVallP56YjiMR2sNATBw+pq89j7zH00Q=
Subject key identifier: AB:FE:56:9E:6C:6F:6E:FC:77:84:C7:97:E5:19:97:4D:1A:15:44:7D
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4886
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q_5Wnmxvbvx3hMeX5RmXTRoVRH0.roa
Signing time: Tue 24 May 2022 00:30:06 +0000
ROA not before: Tue 24 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18566 (0x4886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 24 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=ABFE569E6C6F6EFC7784C797E519974D1A15447D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:b4:d8:75:a8:9d:52:af:21:53:b6:f9:7e:
5c:61:50:08:e5:93:82:aa:2c:32:55:76:a3:e5:f0:
76:57:29:f2:fc:63:4e:d7:ac:70:8f:7c:ab:ad:fc:
63:06:79:ca:c5:a5:d3:f6:a5:b0:48:32:c2:6e:55:
43:4a:61:c3:d8:5a:39:9d:42:f7:cb:9f:3f:c3:f4:
e3:ba:17:b0:ac:f0:b9:11:67:8d:db:96:1f:ff:ef:
2a:94:8a:5b:e4:2d:3b:70:96:41:b0:d5:95:27:ed:
cc:a2:fd:ec:b8:71:4f:38:3f:2e:51:46:51:22:64:
f1:24:12:40:73:9a:55:98:1f:c0:33:a0:81:65:9e:
fb:a7:e5:3f:95:c0:20:3c:fb:ba:99:2b:fa:12:b0:
2a:90:d1:bb:0d:3f:bb:69:14:f5:40:44:fa:69:b9:
f5:ef:0d:38:af:22:6f:15:a4:f6:97:49:71:62:1b:
6a:14:3e:e7:86:69:45:e9:1e:eb:9a:dc:89:6c:1d:
16:80:70:dc:f3:6a:2c:21:ab:de:97:4f:82:e6:09:
7b:9a:b8:9a:cf:bf:b6:1e:04:13:cf:36:c6:66:da:
00:09:a2:e0:dc:18:8d:70:f3:c1:87:7c:12:99:8c:
04:7c:09:fd:ec:da:7a:66:8c:69:fd:23:af:57:e4:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FE:56:9E:6C:6F:6E:FC:77:84:C7:97:E5:19:97:4D:1A:15:44:7D
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/q_5Wnmxvbvx3hMeX5RmXTRoVRH0.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d7:b2:8f:2d:d8:db:12:14:8c:84:63:83:83:9a:6f:d5:25:
92:80:e5:61:6d:57:d7:e0:f9:8c:99:a8:8a:0e:f0:18:0f:e0:
9b:c4:21:ee:59:af:30:d4:57:05:30:8d:13:26:35:1e:65:5e:
f5:32:86:3b:98:bd:1f:b8:40:78:d3:b6:42:55:01:ea:2a:37:
52:dd:d2:f6:4c:b5:7b:5b:66:8c:15:8d:dc:a7:e5:13:2c:c6:
f7:4f:af:a6:39:05:fd:e9:a4:59:4a:cc:46:88:dc:d3:02:d9:
a3:e7:36:a2:7f:42:02:0e:7e:bd:34:73:7c:e6:bc:d8:23:4b:
d8:11:af:2e:fa:9d:98:58:c2:4d:6f:60:01:2a:7c:c5:6d:d3:
77:6b:47:fd:a3:c9:ed:d4:45:b9:51:e6:2c:0a:41:87:cb:3b:
ce:2f:5f:c4:46:0a:4f:be:78:d3:45:9a:b8:f8:97:bc:29:b5:
8d:a0:c8:0a:fb:41:24:e8:1f:3e:37:ef:59:83:81:c2:18:3b:
49:0a:10:23:96:5b:99:f7:10:f2:94:7e:71:58:c5:a6:bd:24:
44:fa:03:eb:44:38:30:83:ea:a6:39:4c:c2:bf:a2:e8:d8:10:
08:be:07:31:7b:dc:93:18:78:7e:f4:2e:79:63:33:98:f1:72:
8b:ab:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org